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Background 


Data brokers claim to have amassed detailed information and profiles about 
the lives of the large majority of UK households. 


Complaints have been raised against data brokers under the General Data 
Protection Regulation (GDPR). It is claimed that their collection and use of 
personal details is not transparent, fair, lawful and accurate. 


As part of its investigation into data brokers, the ICO has commissioned 
market research to understand the public’s expectations of the use of 
personal data. 


Research objective Methodology 


Online survey with 2,342 UK 
adults. 


Face to face survey with 261 GB 
adults who do not access the 
Internet. 


“To understand the public’s 
awareness and perceptions of 


how their personal data is (> Fieldwork conducted: 


shared within the data broking 7) Online: 5-7 Feb 2019. 
Face to Face: 14-20" Mar 2019. 


industry.” ; 
Interviews lasted up to 10 minutes. 


Results are weighted to be 
nationally representative by age and 
gender. 

If a chart or table of a single response 
question does not add up to 100%, then 
this is because of rounding used on the 
data. 
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Executive Summary 


O Many people are unclear what happens to their personal details when they share them with 
organisations. 


© Few believe the trade of information is solely in their own favour. 


© People expect their details will be used for other purposes, including being sold. 


© Onward sharing, typical data sources and the ways in which personal details are used are 
largely seen as unacceptable. 


© Given full information, many would ask for their details to be deleted. 
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Perceptions before description of data 
brokers is shown 


The majority of the public share their personal details via channels seen to be used by data brokers. 
However, one in five online and nine in ten offline respondents claim to not share their details in these ways. 


MQ1. In which of the following ways do you give your personal details (such as name, address, email address, telephone number and date of 
birth) to organisations or websites you interact with? 


Online Offline 
Audience Audience 


Through telephone or online surveys 


Signing up to a website (for example for free 
magazines or newsletters concerning gardening, 43% 2% 
lifestyle, motoring, travel, money or wine) 


To obtain offers or money off vouchers (for example, for 
shopping or dining), either guaranteed or through prize 43% 2% 
draws 


Signing up for catalogues 


harris 


interactive Online Base: 2342 (All respondents) 


Offline Base: 261 (All respondents who do not access the Internet) 


A third of online and over half of offline respondents are unclear what happens to their personal details 


when they share them with organisations. 


MQ3. When youlif you were to give your personal details to organisations or websites, how much do you feel you know about what these 


organisations do with your personal details? 


Online Audience 
Net Net 
Unknowledgeable Knowledgeable 
(33%) (41%) 


9% 24% 26% 35% 


m1 - | do not know what organisations do with my personal details 
m2 
a3 
a4 


m5 - | am fully knowledgeable with what organisations do with my 
personal details 
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interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 


Offline Base: 261 (All respondents who do not access the Internet) 


Offline Audience 


Net Net 
Unknowledgeable Knowledgeable 
(53%) (7%) 
| 


4% 14% 3% 


= Unsure 

m 1 - | do not know what organisations do with my personal 
details 

m2 

a3 


m4 


m5 - | am fully knowledgeable with what organisations do with my 
personal details 


Nearly half of online respondents always read privacy policies to help them understand how their personal 
details will be used. Nearly two in three offline respondents never review them. 


MQ4. Do you read the privacy policy of organisations, to find out how your personal details will be used, when you provide! are asked to provide 


your personal details? 


63% 


Net always read: Online 47% Offline 14% Net sometimes read: Online 40% Offline 23% 


Yes, | always read them and do Yes, | always read them but not Yes, | sometimes read them and Yes, | sometimes read them but No, I never read them 
so fully fully when | do, | do so fully don't read them fully 


= Online Audience = Offline Audience 


harris 
O interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 9 
Offline Base: 261 (All respondents who do not access the Internet) 


Length is the main reason for not always reading privacy policies, followed by complexity. Brand trust 
and distrust are also factors. 


MQ5. Why do you not always fully read the privacy policy of organisations when you give your personal details to them? 


It is too long 66% 


It is too hard to understand 


It does not tell me anything new or useful 


| trust the organisations | give my personal details 
to 


There is a role fora 
regulator to ensure policies 
are accessible, concise, 
easy to understand and to 


It is unlikely to be honoured 


It is too hard to find 


take action against those 
who do not adhere to their 
policies. 


It is not important 


| am unaware of privacy policies 


Other 


= Online Audience m Offline Audience 


harris Online Base: 1524 (All respondents who do not always fully read the privacy policy of organisations when giving personal details) 
interactive offline Base: 245 (All respondents who do not always fully read the privacy policy of organisations) 
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Almost half of online respondents feel the trade of information is balanced between the individual and 
the organisation, compared with the same proportion of offline audience feeling the trade is in favour of 
the organisation. 


MQz2. In general, when youlif you were to give your personal details to organisations to sign up for free magazines or newsletters, obtain offers 


or money off vouchers or through telephone or online surveys, whose favour do you think this trade is in? 


Online Audience Offline Audience 


10%6% 


= The trade is in favour of the organisations = The trade is in favour of the organisations 


m The trade is balanced between the organisations and 


= The trade is balanced between the organisations and 
myself 


myself 
m The trade is in my favour m The trade is in my favour 


m Unsure 


Online respondents who always read privacy policies are 3x more likely to believe the 
trade is in favour of themselves than those who never read them. Removing perceived 
barriers to accessing policies is key. 
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interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 


Offline Base: 261 (All respondents who do not access the Internet) = 


Almost half of online and a third of offline respondents expect organisations to sell their details on in 
some way. 


MQ6. When youlif you were to give your personal details to these organisations or websites, what do you expect the organisation to do with 


them? 


Net sell details: Online 46% Offline 30% 


61% 


Use my details to give me Use my details to choose Sell my details to help build Sell my details so other Sell my details to other Sell my details to other Other 
the service that | provided what adverts to send me a picture about general organisations can choose organisations or websites organisations or websites 
them for from that same organisation consumer behaviour and whether to contact me, so that those organisations who had sent me marketing, 
or website activity that may be used to show me adverts, offer me can choose what adverts to to trace me so that they can 
predict individual behaviour promotions, or make other send me continue sending marketing 
decisions about me as a 
customer 
= Online Audience = Offline Audience 
harris Online Base: 1865 (All respondents who give personal details to organisations/websites) 
interactive Offline Base: 261 (All respondents who do not access the Internet) 12 


NB: 48% of offline respondents are unsure what to expect organisations will do with personal details 


Nearly nine in ten online respondents expect to be notified by a company they do not have a direct 
relationship with about the data they hold and how they use it. 
Over half of offline respondents think they should be notified. 


MQ8. When organisation A, with whom you do not have a direct relationship, has collected personal details about you so that they can sell it to 


other organisations that want to send you direct marketing, do you think you should be notified by organisation A about the data they hold and 
how they use it? 


Online Audience Offline Audience 


= Yes m No = Unsure =m Yes =No =Unsure 


harris 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 13 


Offline Base: 261 (All respondents who do not access the Internet) 


Over two thirds of respondents find onward sharing unacceptable. 


MQ7. In general, how acceptable or unacceptable is it that your details might be sold to or shared with other organisations 


other than for the original reason you shared your personal details? 


Online 
Audience E iiao 


Offline 


Audience Ene MLE: 
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21% 


it acceptable 


3% 


Online Base: 1865 (All respondents who give personal details to organisations/websites) 
Offline Base: 261 (All respondents who do not access the Internet) 


67% 
find it 
unacceptable 


84% 
find it 
unacceptable 
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Females and 55+ year olds who are online are more likely to find onward sharing unacceptable. 


Find onward sharing unacceptable 


Online Audience 


© @ 
A 5% * 60% 
iea se | os 


50% 64% 82% 


Yes, 
sometimes 
read privacy 

policies 


Yes, always 
read privacy 
policies 


No, never 
read privacy 
policies 


harris ; Online Base: 1865 (All respondents who give personal details to organisations/websites) 
interactive offline data not shown due to low base sizes 
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Perceptions after description of data 
brokers is shown 


Respondents were presented with the following information about data brokers, halfway through the 
survey. 


Many organisations that use marketing rely on data brokers. These brokers collect 
a lot of information about people, which can include (but is not limited to): 
name 

aliases (different names or identities) 

postal address (including previous addresses and the dates of these) 
telephone numbers (landlines and mobiles) 

email addresses 

date of birth 

gender 

marital status 

family connections (number of children, household make-up, etc) 

property type 

expected purchasing behaviour and interests 

financial background (including wealth and some credit file information) 
open electoral register information (an extract of the Electoral Register, that can 
be bought by any person or organisation for purposes like marketing) 
occupation 

interests 

charity donations 

information about culture, wealth and behaviour, which comes from detailed 
data about the area in which you live (based on a number of data sources 
including the anonymised National Census data) 
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This information is collected from a variety of sources, including: the details you give 
to organisations, credit information, organisations sharing their own marketing lists, 
the full and open electoral registers, or publicly available sources (anything from 
information obtained from websites about properties up for sale to Registers of 
Insolvency). 

These pieces of information are pulled together into a profile about you (which can 
consist of more than 500 pieces of personal data) and sold on to other data brokers or 
organisations interested in marketing. 


They will use the data to: 


target advertising at you, 

rule you in or out of marketing lists (depending on whether it is believed you can 
afford what is being sold), 

help organisations manage their relationship with you (what offers you should be 
sent, or what type of campaigns you are likely to respond to so that they retain your 
custom), 

help organisations who may only know one or two pieces of information about you 
to find out more information (e.g. they only have your email address so they find 
out your postal address) 

allow organisations who had sent you marketing before you moved to trace you to 
your new contact details so that they can continue sending marketing 

help organisations work out what your characteristics are as a customer so that 
they can send marketing to other people who are similar to you. 


Your personal details can exchange hands between many different data brokers, 
potentially passing through more than five different organisations before eventually 
being used to send marketing to you. 
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The description of data brokers leads to a slight shift in claimed knowledge of what organisations do with 


personal details. 


Online Audience 


Net Net 
Unknowledgeable Knowledgeable 
(33%) (41%) 


BEFORE 


reviewing POME 26% 35% 
description 


m1 - | do not know what organisations do with my personal details 
m2 
a3 


a4 


E5 - | am fully knowledgeable with what organisations do with my personal 
details 


AFTER 
reviewing EEY 31% 22% 25% 7% 
description 
Net Net 
Unknowledgeable Knowledgeable 
. 146%) (32%) 
harris 


interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 
Offline Base: 261 (All respondents who do not access the Internet) 


Offline Audience 
Net Net 
Unknowledgeable Knowledgeable 
(53%) (7%) 


4% 14% 3% 


m Unsure 


E1 - | do not know what organisations do with my personal 
= cetalls 


a3 
a4 


a5 -| am fully knowledgeable with what organisations do with my 
personal details 


23% 5Yq 14% 2% 


Ve a al 

Net Net 
Unknowledgeable Knowledgeable 

(58%) (5%) 
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Shift in perceptions amongst online respondents after reviewing description of data brokers: Knowledge 


1 3% move towards 2 8% move towards 


feeling more knowledgeable feeling less knowledgeable 


5% move from 11% move from ‘neutral 
‘unknowledgeable’ to to ‘unknowledgeable’ 
‘neutral’ 10% move from 

4% move from ‘knowledgeable’ to 
‘unknowledgeable’ to ‘unknowledgeable’ 
‘knowledgeable’ 7% move from 

4% move from neutral to ‘knowledgeable’ to 
‘knowledgeable’ ‘neutral’ 


harris 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 
Offline data not shown due to low base sizes 


58% do not change 


their opinion 


24% remained 
‘unknowledgeable’ 


24% remained 
‘knowledgeable’ 
10% remained ‘neutral’ 
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After reviewing the description of data brokers, there is a shift in perceptions towards the trade of 
information being in favour of the organisation. 


Online Audience Offline Audience 


BEFORE 
reviewing 10%6% 
description 
= The trade is in favour of the organisations m The trade is in favour of the organisations 
= The trade is balanced between the organisations and = The trade is balanced between the organisations and 
myself — myself 
m The trade is in my favour m The trade is in my favour 
= Don't know 
AFTER 
reviewing 34% 12% 11%5% 
description 
h arris MQ2/15. In general, when you/if you were to give your personal details to organisations to sign up for free magazines or newsletters, obtain offers or money off vouchers or through 
° t ti telephone or online surveys, whose favour do you think this trade is in? 5 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 0 


Offline Base: 261 (All respondents who do not access the Internet) 


Shift in perceptions amongst online respondents after reviewing description of data brokers: 


Trade of information 


2 6% move more 


towards the trade being in 
favour of the organisation 


4% move more towards 


the trade being in favour of 
the individual 


3% move from ‘trade is 
in the organisation’s 
favour’ to ‘trade is 


e 20% move from ‘trade is 
balanced’ to ‘trade is in the 
organisation’s favour’ 

4% move from ‘trade is in the 
individual’s favour’ to ‘trade is 
balanced’ 

2% move from ‘trade is in the 
person’s favour’ to ‘trade is in 
the organisation’s favour’. 


balanced’ 

1% move from ‘trade is 
balanced’ to ‘trade in 
favour of the individual’. 


harris 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 
Offline data not shown due to low base sizes 


69% do not change 


their opinion 


32% remained ‘trade is 
in the organisation’s 
favour’ 

27% remained ‘trade is 
balanced’ 

10% remained ‘trade is 
in favour of the 
individual’ 
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Profile: Mike, 40, from Manchester 


This is Mike, 40, from Manchester. He provides 
his personal details by: “signing up to 
websites” and “signing up for catalogues”. 


He feels fairly knowledgeable about how his 
data is used and thinks the trade of information 
is in his favour. 


After data broking is explained to him, he finds 
it acceptable that marketing could be targeted 
at him using the open electoral register but 
unacceptable credit information might be used. 


Mike also now feels that the trade of 
information is in the favour of the 
organisations and feels less knowledgeable 
about what organisations do with his personal 
data. 
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Credit information is the data source that online respondents find most unacceptable for targeted 
marketing. All sources are deemed equally unacceptable by offline respondents. 


MQ39. In general, how acceptable or unacceptable would you find it if your personal details obtained from the following sources were used to 


target marketing at you? 


Online Audience Offline Audience 


Open electoral Magazine or Other publicly Credit Open electoral Other publicly Magazine or Credit 
register offers websites available information register available offers websites information 
or through information information or through 
surveys surveys 
m Net unacceptable mNeither m Net acceptable E Net unacceptable = Neither Net acceptable 


Females and 55+ yr olds are most likely to 


find targeted marketing originating from 
these sources as being unacceptable 


harris 
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Offline Base: 261 (All respondents who do not access the Internet) 


Using personal details to understand behaviour, manage relationships, build profiles and for tracking is 
often seen as unacceptable. 


MQ10-14. Still thinking about these sources (magazine or offers websites, open electoral registers, other publicly available information, credit information etc), in general, how acceptable or unacceptable 


would you find it if your personal details obtained from these sources were sold to other organisations to ..: 


Online 
Audience 
better manage your customer 
allow them to understand relationship (e.g. through allow them to trace you for 
consumer behaviour to help predicting your responses to link a small amount of marketing purposes if you 
improve marketing marketing campaigns, or information they already hold move home or change your 
campaigns and identify likelihood to stop dealing with on you with a much larger combine into a profile about phone number or email 
potential customers that organisation) profile you address 
17% 17% 17% 
Offline 25% 27% 26% 
Audience 
mVery unacceptable mUnacceptable Neither Acceptable mVery acceptable 
harris . 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 24 


Offline Base: 261 (All respondents who do not access the Internet) 


Using personal details to understand behaviour, manage relationships, build profiles and for tracking is 
often seen as unacceptable. 


Summary: Acceptability of personal details Online Offline 
being sold to other organisations to..: Audience Audience 


...allow them to understand consumer 
behaviour to help improve marketing 
Campaigns and identify potential customers 


...better manage your customer relationship 

(e.g. through predicting your responses to © © 
marketing campaigns, or likelihood to stop 

dealing with that organisation) 


...link a small amount of information they © © © 

already hold on you with a much larger profile 

...combine into a profile about you 
66% 85% 


...allow them to trace you for marketing 


purposes if you move home or change your 18% &y ETA 
phone number or email address 
Net Unacceptable 
harris MQ10-14. In general, how acceptable or unacceptable would you find it if your personal details obtained from these sources were sold to other organisations to ... 
O interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 25 


Offline Base: 261 (All respondents who do not access the Internet) 


Amongst online respondents, females and 55+ year olds are most likely to find personal details being 
sold to other organisations unacceptable. 


MQ10-14. Still thinking about these sources (magazine or offers websites, open electoral registers, other publicly available information, credit information etc), in general, how 
acceptable or unacceptable would you find it if your personal details obtained from these sources were sold to other organisations to ..: 


% Unacceptable Differences by gender/age 


...allow them to trace you for 
marketing purposes if you move © 18-34 | 35-54 | 55+ | 
home or change your phone 53% 67% 85% 
number or email address 
...combine into a profile about you z 

46% 64% 83% 


...link a small amount of 18-34 55+ 
information they already hold on EEJEZI 
you with a much larger profile 44% 59% 76% 
...better manage your customer e 18-34 | 35-54 | 55+ | 
Dao p AP so% Mp a7 35% 49% 65% 

0 0 0 
...allow them to understand 
consumer behaviour to help 46% 3 ; 18-34 EZS 55+ 
improve marketing campaigns and A Dou Mr 34% 42% 58% 
identify potential customers 


harris 
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Offline data not shown due to low base sizes 


Around half of online respondents would ask for their personal details to be deleted if they found an 
organisation was selling and analysing their details. 
Three in ten offline respondents would do nothing, as they do not expect any action to be taken. 


MQ17. If you found out that an organisation was selling and analysing your personal details in the ways that have been discussed in this 
survey, what would you do about it? 


Online Audience Offline Audience 


Net: Net: 
Ask to see a copy of my personal data 40% 13% 


to the organisation 


Complain about the use of my personal data Net: Net: 
to the Information Commissioner’s Office 28% | 46% 20% | 40% 


Nothing, because | do not expect any action é Net: Net: 
to be taken ee 16% Ue 32% 


Nothing, because | do not object to its use ay 


harris 
interactive Online Base: 1865 (All respondents who give personal details to organisations/websites) 


Offline Base: 261 (All respondents who do not access the Internet) 
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